SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/codes-to-get-free-stuff-on-roblox PDF link annotation
- http://tegeler-segler.de/images/roblox-account-pin-hacked.pdfIn PDF document text
- https://www.cnte.org.br/images/roblox-cheat-engine-66-bypass.pdfIn PDF document text
- http://logisticgroup.co/images/how-to-hack-any-account-roblox-2021-windows-10.pdfIn PDF document text
- http://adues.org/images/roblox-marshmello-black-shirt-free.pdfIn PDF document text
- https://pa-waingapu.go.id/images/hacked-version-off-assassin-roblox.pdfIn PDF document text
- http://ivalor.fr/images/roblox-booga-booga-hack-download-2021.pdfIn PDF document text
- http://shiny-nn.ru/images/roblox-how-to-hack-with-cookies.pdfIn PDF document text
- http://rafaelmontesinos.com/images/how-to-get-robux-for-free-2021.pdfIn PDF document text
- https://www.manisoft.ir/images/roblox-anime-cross-hack.pdfIn PDF document text
- http://columbuscigar.com/images/how-to-hack-roblox-high-school-with-cheat-engine.pdfIn PDF document text
- http://escolaarboc.cat/images/roblox-be-a-parkour-ninja-hack.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/roblox-cheap-hack-buy.pdfIn PDF document text
- http://sports-service.com/images/free-admin-hack-roblox.pdfIn PDF document text
- http://www.gadanie.lv/images/roblox-hack-freehackshop.pdfIn PDF document text
- http://bibliotheque-perrigny-les-dijon.fr/images/roblox-new-shoot-though-walls-hack.pdfIn PDF document text
- https://weightlessriding.com/images/beyon-roblox-tries-hack-2021.pdfIn PDF document text
- http://www.copoint.co.uk/images/roblox-free-level-6-exploit.pdfIn PDF document text
- https://www.audev.com/images/how-to-get-back-your-hacked-roblox-account.pdfIn PDF document text
- http://artindex.pro/images/free-robux-codes-2021-not-used-no-verification.pdfIn PDF document text
- https://septik-montag.ru/images/roblox-pokemon-brick-bronze-hack-2021.pdfIn PDF document text
- https://www.wijhalenhetop.nl/images/como-hackear-cuentas-de-roblox-sin-programas.pdfIn PDF document text
- https://www.hotschool.com.au/images/huge-free-robux-giveaway-free-robux-giveaway-livesteream.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/roblox-police-car-free.pdfIn PDF document text
- https://www.tsdb.com.au/images/download-a-free-gater-for-robux-generator.pdfIn PDF document text
- https://www.utalii.ac.ke/images/robux-foxy-cheats.pdfIn PDF document text
- http://www.tamogatoweb.hu/images/roblox-games-give-free-robux.pdfIn PDF document text
- http://properteez.com/images/roblox-free-gamepass-script-pastebin.pdfIn PDF document text
- https://schaefer-rechtsanwaelte.com/images/how-to-trade-in-roblox-for-free.pdfIn PDF document text
- https://www.air-shop.cz/images/websites-that-give-you-free-robux.pdfIn PDF document text
- https://raduzhnyj.od.ua/images/free-robux-without-information.pdfIn PDF document text
- https://www.ncscolour.no/images/khaos-how-to-get-free-robux.pdfIn PDF document text
- http://adues.org/images/roblox-egg-hunt-hack.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/free-robux-sitees-workin.pdfIn PDF document text
- http://horsa18.ru/images/case-clicker-hack-roblox.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/zombierule1-this-hack-gets-you-thousands-of-robux.pdfIn PDF document text
- https://www.ukrtrans.biz/images/hack-an-account-on-roblox.pdfIn PDF document text
- http://technologicalsc.com/images/free-robux-generator-no-human-survey.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-robux-youtubecom.pdfIn PDF document text
- https://www.eglihotel.gr/images/roblox-cool-kid-hack.pdfIn PDF document text
- http://legs11.co.za/images/how-to-get-free-robux-on-roblox-2021-july.pdfIn PDF document text
- http://apkmaykop.ru/images/yt-how-to-get-free-robux.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/free-robux-glitch-2021-july.pdfIn PDF document text
- http://optsuvenir.by/images/games-that-have-free-robux.pdfIn PDF document text
- http://ff-obertraun.at/images/roblox-free-robux-redeem-codes.pdfIn PDF document text
- https://osk-sibir.ru/images/unlockmygamescom-free-robux.pdfIn PDF document text
- https://www.millatgears.com/images/roblox-hack-no-survey-2021.pdfIn PDF document text
- http://stackideas.com/images/roblox-destruction-simulatoro-hack.pdfIn PDF document text
- https://pneukalousek.cz/images/robux-gratis-hack-2021.pdfIn PDF document text
- https://hbpbenin.com/images/free-robux-generator-with-color-verification-2021.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000083dd.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x83DD | 25704 bytes |
SHA-256: aea1c31408b7ae88c049ddf0953b15adcef7358f125889d157b3a8743003f76f |
|||
font_01_sfnt_off0000be75.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBE75 | 18112 bytes |
SHA-256: d8b34626f715871f6cbaf04f8a1574d45716a2d59fcbb547aeb8664599e7e8b5 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.